Outt
Sett
Behavioral task
behavioral1
Sample
42325ed458b69005d48c99c20e5e0b06_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42325ed458b69005d48c99c20e5e0b06_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42325ed458b69005d48c99c20e5e0b06_JaffaCakes118
Size
52KB
MD5
42325ed458b69005d48c99c20e5e0b06
SHA1
17f6d24d6c7a80f0440e0c948bf896afe98c7c5b
SHA256
5a5e7f3437d14bf9ecbab70ea02add58cc93beb6527bc843c46114802b9ae0b7
SHA512
c3b2b82c2c657371b4252f1f2c0e696ccf7803bd7484408301c40fac1cfce48bc0a61dea526cd6d842c189b398dc403622b27a69d05760c4884905beb8accfad
SSDEEP
1536:Bm1NGJVGcUb3Di4uRGReERxait7o7nTjFNVbO3:kX0VDUb3mDRGReELwH/VbO3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
42325ed458b69005d48c99c20e5e0b06_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ